News for hackers. Stuff that matters.

A comment on Firefox Send: Free encrypted file transfer service. Parent comment

Re:Firefox Send: Free encrypted file transfer service by lol768 on Tuesday March 12, 2019 @11:13AM (#19368918)
It seems vulnerable to an active MitM - if the attacker is in a position to serve malicious JS that exfiltrates the data from window.location.hash.

I think the scheme is fairly robust against passive interception though.

[ Parent | on HN ]
Re:Firefox Send: Free encrypted file transfer service by woah on Tuesday March 12, 2019 @11:15AM (#19368933)
Client side encryption keeps honest companies honest but no more than that
[ Parent | on HN ]